From 614332628ffeba85e5c6522563deea6532f61171 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Wed, 9 Sep 2026 01:38:28 -0600 Subject: [PATCH 1/2] feat(access): authorize OpenClaw endpoint --- cf-access-openclaw.tf | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 cf-access-openclaw.tf diff --git a/cf-access-openclaw.tf b/cf-access-openclaw.tf new file mode 100644 index 0000000..fe9bba4 --- /dev/null +++ b/cf-access-openclaw.tf @@ -0,0 +1,24 @@ +resource "cloudflare_zero_trust_access_application" "openclaw" { + account_id = local.account_id + name = "OpenClaw" + type = "self_hosted" + domain = "openclaw.makeitwork.cloud" + session_duration = "24h" + + allowed_idps = [ + cloudflare_zero_trust_access_identity_provider.github.id, + ] + + policies = [ + { + name = "makeitworkcloud-admins" + decision = "allow" + session_duration = "24h" + include = [{ + group = { + id = cloudflare_zero_trust_access_group.admins.id + } + }] + } + ] +} From 2e94abd966add052b1eaa3d479c978bd1ede9bd8 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 9 Sep 2026 07:50:13 +0000 Subject: [PATCH 2/2] chore: apply pre-commit fixes --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index a75ab7a..778e404 100644 --- a/README.md +++ b/README.md @@ -38,6 +38,7 @@ No modules. | [cloudflare_zero_trust_access_application.k3s](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource | | [cloudflare_zero_trust_access_application.mcp_gateway](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource | | [cloudflare_zero_trust_access_application.mcp_gateway_backend](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource | +| [cloudflare_zero_trust_access_application.openclaw](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource | | [cloudflare_zero_trust_access_application.warp](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_application) | resource | | [cloudflare_zero_trust_access_group.admins](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_group) | resource | | [cloudflare_zero_trust_access_identity_provider.github](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_identity_provider) | resource |